Lenovo ThinkVantage (Hardware Password Manager Deployment Instrukcja Użytkownika Strona 25

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
  • Strona
    / 60
  • Spis treści
  • BOOKMARKI
  • Oceniono. / 5. Na podstawie oceny klientów
Przeglądanie stron 24
Changingserverpolicysettings
Serverpolicysettingsincludevariouswaystomanageuserenrollment,credentials,andclientportaland
BIOSsettingsfortheLenovoHardwarePasswordManagerdevicesyoumanage.Thesettingsarechanged
fromtheThinkManagementconsole;itemsthataffectindividualdevicesarethenheldinapendingqueue
untilthenexttimeeachdeviceisbootedandrequestsanupdatedpolicy.
Tochangeserverpolicysettings:
1.ClickRemoteActionsandPolicySettingsinthetoolboxorclickT oolsThinkVantageHardware
PasswordManagerRemoteActionsandPolicySettings.
2.ClickUpdateServerPolicySettingsonthetoolbar.
3.Makechangesonthefourtabsinthedialogbox,andthenclickOKwhenyouhavenished.
ThetabsintheServerPolicySettingsdialogboxaredescribedasbelow.
General-Thistabliststhename,IPaddress,andUDPportoftheHardwarePasswordManagerserver
usedtoauthenticateHardwarePasswordManagerusers.TheStatusofPortalServicesectionshows
whethertheportalserviceontheHardwarePasswordManagerserverisrunning.Theportalservice
isaUDPserver,oneofthecomponentsontheHardwarePasswordManagerserver.Itisusedfor
communicationwiththeHardwarePasswordManagerdeviceBIOSwhentheuserlogsonusingthe
intranetaccountlogin.Youcanstart,stop,orrestarttheserviceasneededfromthisdialogbox.
SelectAllowuserstoenrollonmultipledevicesifyouwanttoalloweachintranetaccounttoenroll
onmultipleHardwarePasswordManagerdevices.Ifthischeckboxiscleared,oneintranetaccount
canonlybeenrolledononedevice.
SelectEnableone-touch”registrationifyouwanttopre-registernewHardwarePasswordManager
deviceswithone-touchfeaturesfromLenovo.One-touchregistrationautomaticallyregistersthedevice
andcreatestheemergencyadminaccountwhentheuserlogsintoWindows.SeealsoChapter5
“Deployment”onpage25
.
SelectEnablerstuserloggedonamachineasadministratorifyouwanttherstenrolleduserto
haveadministratorprivilegesintheBIOS.
Credentials-Thistabdeterminesthelengthofauto-generatedpasswordsandthenumberofpassword
backupstokeep.BackupsareencryptedandstoredintheHardwarePasswordManagerdatabase.
Bydefault,auto-generatedhardwarepasswords,aswellasemergencyadminaccountpasswords,
arebetween15and20characterslong.Youcanchangetheminimumandmaximumnumbersfor
bothtypesofpasswords.Youcanalsospecifyhowmanybackupstosaveforhardwarepasswords.
Themaximumpasswordlengthis64.
ClientPortal-ThistabspecieswhichmenuitemsareenabledfordisplayontheClientPortalmenuon
managedHardwarePasswordManagerdevices.TheuseraccessestheportalfromtheWindowsStart
menu(StartAllProgramsThinkVantageHardwarePasswordManager).TheClientPortal
menuitemsarealwaysselected.WhenyouperformtaskssuchasRemoveUserafteryouenterthe
intranetcredentialsthatcorrelatetotheUser,ServiceTech,andAdministratorroles,youwillgetanerror
messageifyoudonothavetheclientportalrights.UserslogintoHardwarePasswordManagerdevices
withanassignedrole,whichcorrelatestotheusergroupthattheuserbelongsto.(See“Managing
HardwarePasswordManagergroups”onpage12
foradescriptionofroles.)So,forexample,auser
mightseealloptionsontheClientPortalbutaServiceTechmighthavealimitedsetofoptionsavailable.
Ifausertriesanoptionthatisnotselectedforthatrole,anerrormessagewillbedisplayed.
BIOS-ThistabspecieswhichmenuitemsareenabledfordisplayontheBIOSmenuofmanaged
HardwarePasswordManagerdevices,andallowsyoutospecifywhichBIOSversionsareexcludedfrom
HardwarePasswordManagerdevicemanagement.BIOSmenuitemsareselectedseparatelyforthethree
userroles:User,ServiceTech,andAdministrator.UserslogintoHardwarePasswordManagerdevices
withanassignedrole,whichcorrelatestotheusergroupthattheuserbelongsto.(See“Managing
Chapter3.ManagingHardwarePasswordManagerdeviceswithThinkManagementConsole17
Przeglądanie stron 24
1 2 ... 20 21 22 23 24 25 26 27 28 29 30 ... 59 60

Komentarze do niniejszej Instrukcji

Brak uwag